Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/05/2024, 06:09
Behavioral task
behavioral1
Sample
2db93771722d1b2504ab29a1be26a034_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2db93771722d1b2504ab29a1be26a034_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
2db93771722d1b2504ab29a1be26a034_JaffaCakes118.pdf
-
Size
40KB
-
MD5
2db93771722d1b2504ab29a1be26a034
-
SHA1
0a3da60fa8be7d65b7226d3aa90ed19745edba8c
-
SHA256
3d763e77e4a96c5ce95127aec29b66e051c7611e0a892cfa4feaf541956fe122
-
SHA512
f79d22dafcb763f3688cca3888e0952abe7974b5ff442e8730dc14bb483276190121ce1651d009d223d1d62db6a77a703f306bf53bc12c97be71d7995c3f3f88
-
SSDEEP
768:UgGzpD2RV3aDFBXanxR84/GSKww+0XVf1ceE9448RoUyKdx16XGrCYP18a0pt26n:hGFqPx0w+XCQRoZIr0dAma0pt26tktux
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2164 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2164 AcroRd32.exe 2164 AcroRd32.exe 2164 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2db93771722d1b2504ab29a1be26a034_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2164
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5226d727b36e9e3bea556c4b6ad864cb3
SHA17acc41784878564d6ca8e3c800183d0d4fb100bd
SHA256e3784356a1c790ebadce2dfd6999785b14556c06bcd65ae6e85ad3dbf729e72d
SHA512ad5a67775d30a152961e54d5a05eb7ce5617bbef70bd1b236d5422bb58c41ced0ad06ae817fe267a3ee345b19fb8d8148a466ad1b68c6666faf6af6b6fe3f602